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DETAILED ACTION 
Claim Rejections - 35 USC§102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless -(b) the invention was patented or described in a printed publication in 
this or a foreign country or in public use or on sale in this country, more than one year prior to the date of application 
for patent in the United States. 

2. Claims 1-32, 43-52 are rejected under 35 U.S.C. 102(b) as being anticipated by 
OTlaherty(6,275,824). 

3. As per claim 1, OTlaherty et al. discloses a system for conducting a transaction with 
privacy on a wide area network(see col. 4, lines 61-67, col. 5, lines 13-16), said system 
including: a personal access device (PAD) contained in a manually portable housing and 
associated with a subscriber to said system, the manually portable PAD(col. 5, lines 1-13), said 
PAD storing a profile of the subscriber and generating commands(see col. 5, lines 1-9, 13-22)- a 
privacy service provider (PSP)(i.e. privacy proxy) connected to the wide area network(see col. 
14, lines 9-30), said manually portable PAD being directly accessible by said PSP based on first 
predetermined subscriber information that sets a first condition for manual authorization as 
established by the subscriber in the subscriber profile for controlling the processing of requests 
for authorization of the transaction, and said PSP being responsive in real-time to the interactive 
and wirelessly transmitted commands from the manually portable PAD(see col. 5, lines 1-9, 13- 
22, col. 14, lines 9-30); a registered vendor (RV) connected to the wide area network(see col. 14, 
lines 8-12); and a privacy shield network (PSN) connected to the wide area network(see col. 14, 
lines 8-30), said RV being registered with said PSN and said PSN being structured to carry 
communications between said PSP and said RV related to the transaction under second 
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conditions set by said profile(see col. 5, lines 17-22, 30-44, col. 14, lines 8-30), based on second 
predetermined subscriber information that sets a second condition as established by the 
subscriber in the subscriber profile for controlling the completion of the transaction(see col. 5, 
lines 1-38) 

4. As per claim 2, O'Flaherty discloses wherein said PAD stores private data associated 
with the subscriber, and wherein said PSP releases any of said private data to said RV only under 
said first and second conditions(see col. 5, lines 1-38). 

5. As per claim 3, O'Flaherty discloses wherein the PSP also stores the profile and the 
private data(see col. 5, lines 1-6, 17-38). 

6. As per claim 4, O'Flaherty discloses wherein said PSP controls access by the RV to the 
PAD under the first and second conditions(col 14, lines 8-30). 

7. As per claim 5, O'Flaherty discloses wherein said PSP includes a network server(see col. 
14, lines 10-13). 

8. As per claim 6, O'Flaherty discloses wherein said RV includes a network server(see col. 
14, lines 11-12). 

9. As per claim 7, O'Flaherty discloses wherein said PSN includes a network server(see col. 
5, lines 30-38). 

10. As per claim 8, O'Flaherty discloses wherein said PSP controls access by said RV to said 
profile under said second conditions(see col. 14, lines 8-30). 

11. As per claim 9, O'Flaherty discloses a second registered vendor (RV) connected to the 
wide area network(see col. 4 5 lines 61-67, col. 5, lines 13-16), said PSP being accessible by said 
second RV under third conditions set by said profile(see col. 14, lines 8-30), said second RV 
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being accessible by the first mentioned RV under fourth conditions set by said second RV and 
said first RV being accessible by said second RV under fifth conditions set by said first RV(see 
col. 5, lines 17-22, 30-44, col. 14, lines 8-30). 

12. As per claim 10, O'Flaherty et al. discloses wherein said second conditions include 
authorization conditions for authorizing the transaction among said PAD, said first RV and said 
second RV(see col. 5, lines 17-22, 30-44, col 14, lines 8-30). 

13. As per claim 11, O'Flaherty discloses wherein said authorization conditions include a 
first authorization for authorizing the second RV to complete an intermediate transaction with 
said first RV(see col. 13, lines 25-60). 

14. As per claim 12, O'Flaherty discloses wherein said first authorization is sent from said 
PSP to said second RV over said PSN, said PSN preventing said first RV from access to first 
authorization(see col. 14, lines 45-65). 

15. As per claim 13, O'Flaherty discloses wherein said second conditions include 
authorization conditions for authorizing the transaction between said PAD and said RV(see col. 
5, lines 17-22, 30-44, col. 14, lines 8-30). 

16. As per claim 14, O'Flaherty discloses wherein said authorization conditions control 
whether said first RV is authorized to request a response from said PAD(see col. 14, lines 8-30). 

17. As per claim 15, O'Flaherty discloses wherein the wide area network is the Internet(see 
col. 14, lines 21-23). 

18. As per claim 16, newly added limitations have already been addressed(see claim 1). 
Also, as per claim 16, O'Flaherty discloses a personal access device (PAD) associated with a 
subscriber for conducting a transaction with privacy on a wide area network(see col. 4, lines 61- 
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67, col. 5, lines 13-16), a manually portable housing; said PAD including: a memory for storing a 
profile of the subscriber; a manually actuable command generator for generating commands(see 
col. 5, lines 1-9, 13-22); a wireless transmitter for wirelessly transmitting the interactive 
commands to a privacy service provider (PSP) directly accessible to the manually portable PAD, 
with the PSP being responsive in real-time to the wirelessly transmitted interactive commands, 
and with the PSP being connected to the wide area network(see col. 14, lines 9-30); and a 
receiver for receiving authorized requests from the PSP, the PSP communicating with said PAD 
under first conditions set by said profile(see col. 5, lines 1-38), each authorized request having 
been received by said PSP over a privacy shield network (PSN) connected to the wide area 
network from a registered vendor (RV) or another privacy service provider, the RV being 
registered on the PSN and communicating with the PSP under second conditions set by said 
profile(see col. 5, lines 1-38). 

19. As per claim 17, OTlaherty discloses wherein the PSP receives first requests over the 
PSN and determines which ones of the first requests are authorized requests under said first 
conditions set by said profile(see col. 5, lines 1-38). 

20. As per claim 18, OTlaherty discloses wherein if the PSP determines that one of the first 
requests is not an authorized request, the PSP selectively responds to this first request over the 
PSN under second conditions set by said profile(see col. 14, lines 8-30). 

21 . As per claim 19, OTlaherty discloses wherein said PAD is in the form of a card(see col. 
5, lines 1-16, col. 14, lines 25-30). 
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22. As per claim 20, O'Flaherty discloses wherein said PAD stores private data associated 
with the subscriber, and wherein the PSP releases any of said private data to the RV only under 
said first and second conditions (see col. 5, lines 1-38). 

23. As per claim 21, O'Flaherty discloses wherein the PSP also stores said profile and said 
private data(see col. 5, lines 1-6, 17-38). 

24. As per claim 22, newly added limitations have already been addressed(see claim 1). As 
per claim 22, O'Flaherty discloses a privacy service provider (PSP) for facilitating 
communications between a privacy shield network (PSN) and a personal access device (PAD) 
associated with a subscriber to the PSN(see col. 14, lines 9-30), where the PAD stores a profile 
of the subscriber and where said PSP and the PSN are connected to a wide area network(see col. 
5, lines 1-9, 13-22), said PSP including: a receiver for receiving interactive commands 
transmitted wirelessly from the PAD, wherein the PAD is contained in manually portable 
housing; a server, responsive in real-time to the wirelessly transmitted interactive commands 
from the manually portable PAD(see col. 5, lines 1-16, col. 14, lines 25-30), for communicating 
with a registered vendor (RV) over the PSN under first conditions set by said profile and in 
accordance with wirelessly transmitted interactive commands received from the PAD, said server 
also for receiving first requests from the RV and for determining which ones of the first requests 
are authorized requests under second conditions set by said profile; and a transmitter for 
transmitting in real-time the authorized requests to the PAD(see col. 4, lines 61-67, col. 5, lines 
13-16). 
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25. As per claim 23, OTlaherty discloses wherein said server is for communicating with a 
plurality of RVs over the PSN in the same way as with the first-mentioned RV(see col 14, lines 
8-30). 

26. As per claim 24, OTlaherty discloses wherein the PAD stores private data associated 
with the subscriber, and wherein said PSP releases any of said private data to the RV only under 
said first and second conditions(see col. 5, lines 1-38). 

27. As per claim 25, OTlaherty discloses wherein said PSP also stores said profile and said 
private data(see col. 5, lines 1-6, 17-38). 

28. As per claim 26, limitations have already been addressed(see claim 1). As per claim 26, 
OTlaherty discloses a privacy shield network (PSN) connected to a wide area network(see col. 
5, lines 1-9, 13-22), said PSN controlling communications among a plurality of privacy service 
providers (PSPs) and a plurality of registered vendors (RVs), where each PSP is directly 
controlled by interactive commands transmitted wirelessly in real-time from a respective 
personal access device (PAD) contained in a respective manually portable housing and 
associated with a respective subscriber to said PSN and is further controlled under conditions set 
by a profile associated with the respective subscriber stored in the respective PAD(see col. 5, 
lines 1-38, col. 14, lines 8-30), said PSN comprising: a first server structure for controlling 
registration of vendors as RVs, where said PSN prevents transfer of communications from 
unregistered vendors to any of the PSPs and RVs(see col. 14, lines 8-12); and a second server 
structure for controlling communications using the wide area network from any of the PSPs and 
RVs to any of the PSPs and RVs, wherein said second server structure controls any 
communication in real-time between a first one of the PSPs and any other one of the PSPs and 



Application/Control Number: 09/854,307 Page 8 

Art Unit: 2131 

RVs under conditions set by the profile stored in the PAD controlled by the first PSP, with the 
real-time control of communications performed by the interactive commands transmitted 
wirelessly from the manually portable PAD directly accessible to each PSP(see col. 14, lines 45- 
65, col. 15, lines 1-15). 

29. As per claim 27, O'Flaherty discloses wherein said second server structure controls 
routing of communications from any of the PSPs and RVs to any of the PSPs and RVs over the 
wide area network(see col. 13, lines 34-60, col. 14, lines 8-30). 

30. As per claim 28, O'Flaherty discloses wherein each PAD stores private data associated 
with the respective subscriber, and wherein the associated PSP releases any of said private data 
to any of the PSPs and RVs only under said first and second conditions(see col. 5, lines 1-38). 

31. As per claim 29, O'Flaherty discloses wherein at least one of the PSPs also stores said 
profile and said private data of the respective subscriber(see col. 5, lines 1-6, 17-38). 

32. As per claim 30, limitations have already been addressed(see claim 1). As per claim 30, 
O'Flaherty discloses a method of conducting a transaction with privacy using a privacy shield 
network (PSN) connected to a wide area network(see col. 5, lines 1-9, 13-22), the method 
including the steps of, storing a profile of a subscriber to the PSN in a personal access device 
(PAD) contained in a manually portable housing and associated with the subscriber(see col. 5, 
lines 1-38); generating interactive commands using the PAD; wirelessly transmitting the 
interactive commands from the PAD; directly accessing the PAD in real-time under first 
conditions set by the profile using a privacy service provider (PSP) connected to the wide area 
network(see col. 4, lines 61-67, col. 5, lines 13-16), the PSP being controlled by the wirelessly 
transmitted interactive commands from the PAD(see col. 14, lines 9-30); registering a vendor 
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with the PSN as a registered vendor (RV) connected to the wide area network(see col. 14, lines 
8-30); and carrying communications between the PSP and the RV related to the transaction under 
second conditions set by the profile using the PSN(see col. 5, lines 1-38). 

33. As per claim 31, it is rejected under the same basis as claim 1. 

34. As per claim 32, OTlaherty discloses a method of using a privacy shield network (PSN) 
connected to a wide area network to control communications among a plurality of privacy 
service providers (PSPs) and a plurality of registered vendors (RVs)(see col. 5, lines 1-9, 13-22), 
where each PSP is directly controlled by interactive commands transmitted wirelessly from a 
respective personal access device (PAD) contained in a respective manually portable housing 
and associated with a respective subscriber to the PSN and is further controlled under conditions 
set by a profile of the respective subscriber stored in the respective PAD(see col. 5, lines 1-38), 
the steps of using a first service structure for controlling registration of vendors as RVs, where 
the PSN prevents transfer of communications of unregistered vendors to any of the PSPs and 
RVs(see col. 14, lines 8-30); and using a second server structure for controlling communications 
using the wide area network from any of the PSPs and RVs to any of the PSPs and RVs, wherein 
the second server structure controls any communication in real-time between a first one of the 
PSPs and any other one of the PSPs and RVs under conditions set by the profile, with the real- 
time control of communications performed by the interactive commands transmitted wirelessly 
from the manually portable PAD directly accessible to each PSP(see col. 5, lines 1-38, col. 14, 
lines 8-30). 

35. As per claim 43, OTlaherty discloses an XML privacy service provider linked to the 
Internet for communication; a plurality of private XML subscriber data files accessible to the 
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PSP, each file being associated with a respective subscriber(see col. 4, lines 61-67, col. 5, lines 
1-16); a subscriber programmable personal access device(P AD) contained in a manually portable 
housing for each subscriber to access the respective file and to directly communicate in real-time 
with the PSP using interactive commands transmitted wirelessly from the PAS; and a plurality of 
registered vendors(RVs) linked to the Internet for communication with the subscribers under 
conditions set by the respective files through the PSP(see col. 5, lines 1-38, col. 14, lines 8-30). 

36. As per claim 44, O'Flaherty discloses wherein the PSP includes means for receiving 
communications from a subscriber; means for transmitting a subscriber's file to that subscriber 
and for changing data in the subscriber's file in response to the subscriber's authorization; and 
means for communicating with an RV in connection with a subscriber's file(see col. 4, lines 61- 
67, col. 5, lines 1-16, col. 6, lines 50-67, col. 10, lines 49-64). 

37. As per claim 45, O'Flaherty discloses wherein each XML subscriber data file includes at 
least one of the following, subscriber identifying data; subscriber credit account data; subscriber 
cash account data; subscriber product preference identifiers; and subscriber product exclusion 
identifiers (see col. 6, lines 50-67, col. 10, lines 49-64). 

38. As per claim 46, O'Flaherty discloses wherein each PAD, a CPU, an operating system 
and a memory device; a battery; a wireless RF communication chip; an input/output interface(see 
col. 4, lines 61-67, col. 5, lines 1-16, col. 6, lines 50-67, col. 10, lines 49-64). 

39. As per claim 47, O'Flaherty discloses a portable battery-powered personal access(PAD) 
for use in a system for a plurality of individual subscribers to receive and transmit private 
personalized communications via the Internet, the system including an XML privacy service 
provider(PSP) linked to the Internet for communication(see col. 4, lines 61-67, col. 5, lines 1-16, 
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col. 6, lines 50-67, col 10, lines 49-64), a plurality of private XML subscriber data files 
accessible to the PSP, each file being associated with a respective subscriber, the PAD being for 
each subscriber to access the respective file and communicate with the PSP, and a plurality of 
registered vendors(RVs) linked to the Internet for communication with the subscribers under 
conditions set by the respective files through the PSP(see col. 6, lines 50-67, col. 10, lines 49- 
64), the PAD a manually portable housing; at least one programmable integrated circuit(IC) 
device that include encrypted identification means; non-directional, short-range communication 
signal generation and receiving means for wirelessly transmitting interactive commands directly 
to the PSP in real-time; a CPU, an operating system and a memory device; and an input/output 
interface(see col. 5, lines 1-9, 13-22). 

40. As per claims 48, O'Flaherty discloses wherein said IC device is removable from said 
PAD(see col. 4, lines 61-67, col. 5, lines 1-16). 

41 . As per claims 49, O'Flaherty discloses wherein the encrypted identification means is a 
unique digital code embedded in ROM(see col. 10, lines 49-57). 

42. As per claims 50, O'Flaherty discloses wherein said IC device is preprogrammed to 
disable the identification means in the event that security of the unique digital code is 
breached(see col. 4, lines 61-67, col. 5, lines 1-16, col. 10, lines 49-63). 

43. As per claims 51, O'Flaherty discloses a housing, an electronic display visible through an 
aperture in said housing and at least one manual actuator for controlling functions of said 
PAD(see col. 13, lines 34-60). 



Application/Control Number: 09/854,307 Page 12 

Art Unit: 2131 

44. As per claims 52, O'Flaherty discloses a microphone having an on/off switch and a voice 
recognition program that converts voice to digital data for storage in said memory device(see col. 
4, lines 61-67, col. 13, lines 34-60). 

Response to Amendment 

45. The Applicant has provided a table on page 18 of remarks section for comparison of 
claims versus prior art that was used in the office action. First, certain features listed by the 
Applicant in table 1 are not claimed. Such as, "consistent user intervention", box 4 in the 
Feature column, discloses "SPDR", where is that claimed? Also, SPP disclosed in box 5, that is 
not claimed. In box 6, discloses the PAD is wireless device, where is that claimed? The claim 
states, for example claim 1, a portable device, there is not claimed the PAD device being 
wireless. In box 7, discloses PAD has a friendly user interface. This also is not claimed. In box 
9, multiple trusted parties, where is that claimed? On page 19, of remarks section, non of the 
features column are claimed. Thus, everything above not claimed is moot. 

46. The Examiner will address the Feature column, that contains claim limitations, User 
Responds to Transaction in Real-time. The Examiner disagrees with the Applicant. O'Flaherty 
does disclose, user responds to transaction in Real-time. O'Flaherty discloses the dataviews are 
provided to requesting entity in response to a data request, the dataview is tailored according to 
the data request(see col. 3-7). 

47. O'Flaherty discloses subscriber personal data records stored on PAD. O'Flaherty 
discloses a smartcard/loyalty card that has information stored regarding privacy preferences(see 
col. 5, lines 1-9). 

48. O'Flaherty discloses requests and responses are processed. O'Flaherty discloses requests 
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and responses are processed, because a data request is accepted from a requesting entity. Then a 
dataview is provided in accordance with verified identity of the requesting entity(see col 13, 
lines 61-67, col. 14, lines 1-7). O'Flaherty discloses whenever a data requesting entity desires 
access to data in the database a request is made to the database management system(see col. 11, 
lines 35-43). 
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